Effective Date: November 2025
1. Introduction
Flying Doctors Society of Africa (“FDSA”, “We,” “Our,” or “Us”) values Your privacy and is committed to protecting Your Personal Data.
This privacy policy (“Privacy Policy” or “Policy”) outlines why and how We collect, use, disclose, share and safeguard the personal and company information you provide when You visit Our e-commerce and donation platforms (the “Platforms”) together with any related software, tools and services provided in connection with the Platforms. It also describes Your rights under the Kenyan Data Protection Act, 2019, and related laws, relating to personal data and how You can exercise them.
We process your Personal Data as set out in this Privacy Policy which you should read.
2. Interpretation and Definitions
In this Privacy Policy, unless the context otherwise requires, the following words and expressions shall have the following meanings: Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses. Device means any device that can access the Platform such as a computer, a cellphone or a digital tablet. Personal Data is any information that relates to an identified or identifiable individual. Platform refers to the Website Service Provider means any natural or legal person who processes the data on Our behalf. It refers to third-party companies or individuals employed or contracted by Us to facilitate the Platform, to provide the Platform on Our behalf, to perform services related to the Platform or to assist Us in analyzing how the Platform is used. Usage Data refers to data collected automatically, either generated by the use of the Platform or from Platform infrastructure itself (for example, the duration of a page visit). You/Your means the individual accessing or using the Platform, or the company, or other legal entity on behalf of which such individual is accessing or using the Platform, as applicable.
3. Information We Collect
We may collect and process the following types of Personal Data:
- Personal Identification Information: While using Our Platform, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but not limited to: Name, address, email address, phone number, other contact details and Usage Data.
- Financial Information: Payment details, including credit/debit card information, mobile money details, and transaction history.
- Donation Details: Information related to Your donations, including donation amounts and preferences.
- E-commerce Transactions: Information related to purchases made on Our platform, including order details and delivery information.
- Technical Data: IP address, browser type, domain name, device information, and Usage Data related to how You interact with Our Platforms.
- Information about your Interactions with our Platforms. We collect information about your interactions with the Platforms, which may include your use of our products, services, websites or apps, including information collected using Cookies and other technologies.
- Other Self-Reported Information. You have the option to provide us with additional information about yourself and others through surveys, forms, features and applications.
- Third Party Data: We may also collect your information from other organisations including credit-reference bureaus, fraud prevention agencies and business directories;
4. How We Use Your Information
We use Your Personal Data for the following purposes:
- To Process Transactions: We use Your financial information to process payments, donations, and purchases.
- To Communicate with You: We use Your contact information to send You updates, receipts, and other relevant communications.
- To Improve Our Services: We analyze technical data to enhance user experience, troubleshoot issues, and ensure the security of Our Platforms.
- For Legal Compliance: We process Your personal data as necessary to comply with Our legal obligations, including those under the Kenyan Data Protection Act, 2019.
- For Verification: We may use Your information for verifying your identity information through publicly available and/or restricted government databases in order to comply with applicable regulatory requirements;
- For Support: We process Your personal data to provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses and responding to consumer rights requests.
- For other purposes: With your permission or where permitted by law, we may also use your data for marketing purposes which may include contacting you by email, telephone, text message or post with information, news and offers on our services.
From time to time, we may also use your Personal Data to send important notices to you, such as communications about transactions you have made, or changes to our terms and conditions or other policies. This information is important to your interactions with us.
5. Lawful Basis for Processing
Your InformationWe will process your personal information based on any of the lawful basis provided for under the Data Protection Act, 2019, Kenya:
- The performance of a service agreement with you;
- FDSA’s legitimate business interests;
- Compliance with a mandatory legal obligation;
- Consent you provide;
- Public interest;
- Your vital interest.
6. Data Sharing and Disclosure Any disclosure of your information shall be in accordance with applicable law and regulations. FDSA shall assess and review each application for information and may decline to grant such information to the requesting party.
We may share Your Personal Data with third parties in the following circumstances:
- Service Providers: We may share Your data with third-party vendors who assist in payment processing, website hosting, and other operational tasks. These include the following payment processing platforms DPO, Pesapal, and Paypal. These vendors are required to comply with Our data protection standards and this Privacy Policy. We may also disclose your information to any other person that we deem legitimately necessary to share data with.
- Legal Requirements: We may disclose Your information if required by law, regulation, or court order.
- With Your Consent: We may share Your information with other third parties if You provide explicit consent.
- Emergency Service Providers: We may share your data with Emergency service providers when you make an emergency call (or where such disclosure to emergency service providers is necessary for your rescue, health and safety) including your approximate location.
7. Data Security We implement appropriate technical and organizational measures to protect Your Personal Data from unauthorized access, use, alteration, or disclosure. However, no method of transmission
over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
8. Retention of Data
We retain Your Personal Data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Once Your data is no longer needed, We will securely delete or anonymize it.
9. Your Rights
Under the Kenyan Data Protection Act, 2019, You have the following rights regarding Your Personal Data:
- Right to be Informed: You have the right to be informed that we are collecting personal data about you.
- Right to Access: You have the right to request a copy of the Personal Data We hold about You.
- Right to Rectification: You have the right to request correction of inaccurate or incomplete data.
- Right to Erasure: You can request that We delete Your Personal Data under certain conditions noting that we may continue to retain your information if obligated by the law or entitled to do so.
- Right to Object: You have the right to object to the processing of Your Personal Data for certain purposes. We may continue to process if we have a legitimate or legal reason to do so.
- Right to Data Portability: You have the right to request that We transfer Your data to another organization, where feasible.
- Right to Request Restricted Processing of Personal Data: You have the right to request restricted processing of your personal data noting that we may be entitled or legally obligated to continue processing your data and refuse your request.
To exercise any of these rights, please contact Us at: flying.doctors@flyingdoctorsafrica.org We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within reasonable time. Occasionally it could take us longer if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
10. Usage Data, Cookies and Tracking Technologies
Usage Data is collected automatically when using the Platform. Usage Data may include information such as Your device’s internet protocol address (e.g. IP address), browser type, browser version, the pages of Our Platform that You visit, the time and date of Your visit, the time spent on those pages, unique identifiers and other diagnostic data.
When You access the Platform by or through a mobile device, we may collect certain information automatically, including, but not limited to, the type of mobile device, Your mobile operating system, the type of mobile internet browser You use, unique device identifiers and other diagnostic data. We may also collect information that Your browser sends whenever You visit Our Platform or when You access the Platform by or through a mobile device.
We use Cookies and similar tracking technologies to enhance Your experience on Our Platforms. You can control cookie preferences through Your browser settings.
11. Children’s Privacy
We do not onboard minors (any person under 18 years of age) except where you additionally register on their behalf as their parent and/ or legal guardian. If you allow a child to use our services, you should be aware that their personal information could be collected as described in this statement.
12. Links to Other Websites
Our Platform may contain links to other websites that are not operated by Us. If You click on a third-party link, You will be directed to that third party’s site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or Platforms.
13. International Data Transfers
From time to time we may need to transfer your personal information outside the Republic of Kenya. We shall take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in Our practices, legal requirements, or for other operational reasons.
If FDSA amends this statement, You can access the most current version of the Privacy Policy by clicking this link https://staging.flyingdoctorsafrica.org/privacy-policy/ so that you will always know how your personal information is being used or shared. Any amendment or modification to this statement will take effect from the date of notification on the Platforms.
15. Contact Us
If You have any questions or concerns about this Privacy Policy or Our data practices, please contact Us at:
Flying Doctors Society of Africa
P.O. Box 27686 – 00506 GPO Nairobi, Kenya
AMREF House, next to Wilson Airport, Langata Road
marketing@flyingdoctorsafrica.org, flying.doctors@flyingdoctorsafrica.org
Phone number: +254 742711945/ +254 733333004
16. Right to Lodge Complaint
You have the right to lodge a complaint with the relevant supervisory authority that is tasked with personal data protection within the Republic of Kenya.